SEC's Historic Crypto Taxonomy: 16 Digital Commodities Named, Staking/Mining Outside Securities Law

General
1

After more than a decade of regulatory uncertainty, we finally have clarity. On March 17, 2026, the SEC and CFTC issued a joint 68-page interpretive release that fundamentally reshapes the regulatory landscape for crypto assets in the United States.

The Five-Category Framework

The guidance organizes all crypto assets into five distinct categories:

  1. Digital Commodities - Assets intrinsically linked to functional crypto systems, deriving value from network operation and supply/demand rather than managerial efforts of others
  2. Digital Collectibles - NFTs and similar assets (not securities in themselves)
  3. Digital Tools - Utility tokens with functional use cases
  4. Stablecoins - Payment-focused tokens backed by reserves
  5. Digital Securities - Tokens meeting the Howey test

The 16 Named Digital Commodities

Here’s the big news: the SEC and CFTC explicitly named 16 crypto assets as digital commodities (not securities):

Bitcoin (BTC), Ether (ETH), Solana (SOL), XRP, Dogecoin (DOGE), Cardano (ADA), Avalanche (AVAX), Chainlink (LINK), Polkadot (DOT), Hedera (HBAR), Litecoin (LTC), Bitcoin Cash (BCH), Shiba Inu (SHIB), Stellar (XLM), Tezos (XTZ), and Aptos (APT).

Critical Clarifications on Staking, Mining, and Airdrops

Perhaps most importantly for DeFi builders and participants, the guidance clarifies that:

  • Staking rewards across all four models (solo, self-custodial, custodial, liquid) are outside securities law - node operators perform administrative work to secure PoS networks, earning payment for services rather than profits from others’ efforts
  • Mining is similarly outside securities law - miners provide computational work and are compensated for that service
  • Airdrops of non-security assets to recipients providing no consideration are outside securities law (no “investment of money” under Howey)

What This Means for Developers and Builders

As someone building DeFi interfaces, this is huge. I’ve spent the last two years constantly checking with our legal team about every feature - “Is this staking interface promoting a security? Will liquidity rewards trigger enforcement?”

This guidance means we can build with confidence. Institutional capital has been waiting for exactly this kind of clarity, and now protocols can focus on creating value rather than regulatory gymnastics.

The Questions That Keep Me Up at Night

But here’s what I’m still uncertain about:

Liquid staking tokens - The guidance says staking is outside securities law, but what about stETH, rETH, jitoSOL? Are tokenized representations of staking positions securities even if staking itself isn’t?

The approved list dynamic - By naming 16 specific commodities, does this create a two-tier market where only “blessed” tokens get institutional money? Does that contradict crypto’s permissionless ethos?

Future reversibility - This is an interpretive release, not a statute. Could a future SEC administration reverse this guidance? Should we wait for the CLARITY Act to pass Congress before making major architectural decisions?

Why I’m Cautiously Optimistic

Despite the uncertainties, I think this is genuinely positive for the industry. Regulatory clarity doesn’t stifle innovation - uncertainty does. Clear rules let us focus on solving real user problems.

And honestly? After years of building in regulatory limbo, having any clear framework feels like progress. We can iterate from here.

What do you all think? Are you excited about the clarity, or worried about the limitations and potential for future reversals?

Sources:

2

Emma, great summary and I share your cautious optimism. Let me address your questions from a legal perspective:

Liquid Staking Tokens - The Gray Area

You’re right to identify this as the critical open question. The guidance explicitly states that staking activity itself (solo, self-custodial, custodial, liquid) is outside securities law because node operators perform administrative services.

But - and this is crucial - the guidance doesn’t directly address whether tokenized representations of staking positions (stETH, rETH, jitoSOL) might be securities.

Here’s how I’m advising clients to think about this:

  • Decentralized liquid staking protocols (like Rocket Pool with its permissionless node operator model) have stronger arguments that rETH is just a receipt token for staking, not a security
  • Centralized/delegated liquid staking where users pool capital and a centralized entity manages staking may face different analysis under Howey
  • The key question is whether token holders are relying on the “managerial efforts of others” or if the protocol is truly decentralized

My prediction: SEC will issue follow-up guidance on liquid staking derivatives within 6-12 months. Until then, protocols should consult securities counsel before launching liquid staking products.

The “Approved List” Problem

You’re absolutely right that naming 16 specific commodities creates a two-tier dynamic. This raises several concerns:

  1. Permissionless innovation vs regulatory blessing - Does crypto’s ethos require that projects succeed or fail based on technical merit and market demand, not regulatory approval?

  2. Lobbying incentives - Will projects now spend resources lobbying the SEC to add their tokens to the commodities list rather than building better products?

  3. Regulatory capture - Does this give SEC gatekeeping power that contradicts the decentralized nature of crypto?

That said, from a practical standpoint, institutional capital needs certainty. Banks, asset managers, and pensions can’t invest in assets with unclear regulatory status. The “approved list” provides that certainty, even if it creates philosophical tensions.

Future Reversibility - The CLARITY Act is Critical

You’re correct that this is an interpretive release, not a statute. Here’s what that means legally:

  • The SEC can revise or withdraw this guidance at any time
  • A future administration with different political priorities could reverse course
  • Court rulings in specific enforcement cases could contradict the guidance
  • The interpretation has “Skidmore deference” (courts give weight to agency expertise) but isn’t binding law

The CLARITY Act - currently pending in Congress - would make commodity status statutory and permanent. Until that passes, there’s always reversal risk.

My recommendation: Build for current rules, but design protocols to be regulation-resistant by default. True decentralization, no admin keys, immutable contracts - these architectural choices protect against regulatory uncertainty.

Why This is Still Major Progress

Despite the limitations, this guidance represents the end of enforcement-by-surprise. For years, the previous SEC brought enforcement actions without explaining clear rules, leaving projects guessing.

Now we have:

  • Clear definitions (digital commodities, tools, collectibles, stablecoins, securities)
  • Named commodities list
  • Explicit clarification on staking, mining, airdrops
  • Joint SEC/CFTC coordination framework

Compliance enables innovation. When builders know the rules, they can focus on creating value rather than legal acrobatics. That’s what’s exciting about March 17, 2026 - not perfect clarity, but sufficient clarity to move forward confidently.

The industry needs to push hard for the CLARITY Act now. Statutory protection is what will truly unlock institutional capital.

3

This is fascinating from a DeFi protocol perspective. Let me share some data-driven analysis on what this means for yield farming and liquidity protocols.

Impact on DeFi TVL and Institutional Capital

I’ve been tracking DeFi TVL across major protocols since the guidance dropped on March 17. Here’s what I’m seeing:

Staking-focused protocols (Lido, Rocket Pool, Jito):

  • Immediate 15-20% TVL increase in first 48 hours
  • Institutional inquiries about liquid staking products up 300%+
  • Compliance teams now green-lighting institutional staking strategies

Yield aggregators and farming protocols:

  • Moderate TVL increase (5-10%)
  • Continued uncertainty about governance token classification
  • Questions about whether LP token rewards constitute securities offerings

The Liquid Staking Derivatives Question Rachel Raised

Rachel, you’re spot-on about the LST gray area. From a protocol economics standpoint, here’s what worries me:

Scenario 1: LSTs are NOT securities

  • DeFi can continue building on staking primitives
  • Composability intact (using stETH as collateral, in LP pools, etc.)
  • Institutional capital flows into liquid staking products
  • TVL growth continues exponentially

Scenario 2: LSTs ARE securities

  • Massive disruption to DeFi composability
  • Protocols would need to delist LSTs or require KYC
  • Liquidity fragmentation across regulated and unregulated venues
  • Probably kills retail access to liquid staking

The decentralization argument you mentioned is key. At YieldMax, we’re analyzing liquid staking protocols on a spectrum:

More decentralized (stronger non-security argument):

  • Rocket Pool: permissionless node operators, no governance over staking
  • Jito: distributed validator set, algorithmic rewards

More centralized (higher securities risk):

  • Some protocols with centralized validator selection
  • Governance tokens that control staking parameters
  • Entities that actively manage validator sets

Governance Tokens - The Elephant in the Room

Emma asked whether this clarifies governance tokens. Short answer: not really.

The guidance creates a “digital tools” category for utility tokens with functional use cases. Many DeFi protocols will argue their governance tokens are “digital tools” because they:

  • Control protocol parameters
  • Don’t promise profits from others’ efforts
  • Provide functional utility (voting on upgrades)

But I’m skeptical the SEC will buy this for most governance tokens. If token holders vote on:

  • Treasury management
  • Revenue distribution
  • Strategic partnerships
  • Protocol fee splits

That starts looking like investment contract management to me, even if dressed up as “governance.”

What I’m Telling Protocol Founders

Here’s my advice to DeFi builders right now:

  1. Design for decentralization from day one - immutable contracts, minimal governance surface area, no admin keys
  2. Separate governance from economics - governance tokens that control tech parameters (block time, gas limits) feel safer than tokens that control revenue
  3. Document everything - show that rewards come from protocol usage/network effects, not managerial efforts
  4. Consult securities counsel - seriously, every protocol should have a compliance review post-March 17

Data Point: Comparing TVL Growth Rates

I pulled data comparing TVL growth rates for protocols with regulatory clarity vs uncertainty:

Clear commodity status (staking ETH, SOL):

  • Q1 2026 TVL growth: +42%
  • Institutional participation: +280%

Unclear status (DeFi governance tokens):

  • Q1 2026 TVL growth: +8%
  • Institutional participation: +15%

The data doesn’t lie - institutional capital flows to regulatory clarity.

My Hot Take

This guidance is net positive for DeFi, but it’s going to force a reckoning. Protocols that were fuzzy about tokenomics, governance, and value accrual will need to pick a lane:

Lane 1: Full compliance as securities - register, do KYC, operate like a regulated financial product
Lane 2: True decentralization - no governance, no revenue sharing, pure utility

The messy middle - governance tokens with revenue sharing, centralized teams with “decentralization roadmaps” - that’s going to be under fire.

Rachel’s right that we need the CLARITY Act. But in the meantime, DeFi builders should design for worst-case regulatory scenarios while hoping for best-case clarification.

4

This is HUGE for Web3 startups and venture capital. Let me share what I’m seeing from the business/fundraising side.

Before March 17 vs After March 17

Before the SEC guidance:

Investor calls went like this:

“Steve, we love your product, but our compliance team won’t let us touch anything with staking rewards or governance tokens. Call us when there’s regulatory clarity.”

After March 17:

“Steve, send us your tokenomics deck. If your token qualifies as a digital commodity or digital tool, let’s talk terms.”

It’s night and day. VCs that were sitting on dry powder waiting for clarity are now actively sourcing Web3 deals.

The Institutional Capital Unlock Diana Mentioned

Diana’s TVL data confirms what I’m seeing on the capital raising side. Here’s what changed:

Staking-focused projects:

  • Term sheets arriving 2-3 weeks after March 17 (vs 6+ months of delays before)
  • VCs comfortable with liquid staking business models
  • Institutional LPs (pensions, endowments) allowing VC funds to deploy into crypto

DeFi protocols with governance tokens:

  • Still getting investor questions: “Is your governance token a security?”
  • Many protocols now redesigning tokenomics to fit “digital tools” category
  • Risk: over-engineering compliance at expense of product-market fit

Does the “Approved List” Create Two Tiers?

Emma asked if the 16 named commodities create a two-tier market. From a startup founder’s perspective: absolutely yes, and it’s already affecting capital allocation.

Tier 1: Named commodities (BTC, ETH, SOL, etc.)

  • Instant institutional legitimacy
  • Banks building products around these assets
  • Compliance teams green-lighting strategies
  • Massive capital inflows

Tier 2: Everything else

  • Still subject to “is it a security?” questions
  • Institutional investors waiting for explicit guidance or CLARITY Act
  • Founders trying to lobby for inclusion on future lists

Here’s my concern: Are we creating a world where success requires regulatory blessing, not just technical merit?

That contradicts the permissionless innovation ethos that drew me to crypto in the first place. The whole point was supposed to be: build something valuable, and the market will reward you. Not: get approved by regulators, then you can compete.

Should Projects Lobby to Be Added to the Commodities List?

This is the strategic question every Web3 startup is asking right now.

Arguments FOR lobbying:

  • Practical reality: institutional capital needs certainty
  • First-mover advantage: early additions get capital before later ones
  • Defensive strategy: if competitors lobby, you have to also

Arguments AGAINST lobbying:

  • Perpetuates gatekeeping by regulatory authorities
  • Shifts resources from product development to government relations
  • Contradicts decentralization principles
  • Expensive (good DC lawyers aren’t cheap)

My take: It’s a prisoner’s dilemma. If everyone lobbies, we all waste money and time. But if your competitors lobby and you don’t, you lose market access.

I hate it, but I’m probably going to have to play this game.

Future Reversibility Risk - Rachel’s Point About CLARITY Act

Rachel, you mentioned that this is interpretive guidance, not statute. This keeps me up at night as a founder.

Here’s what investors are asking:

“Steve, if we invest M in your Web3 startup based on current SEC guidance, could a future administration reverse course and destroy the business model?”

The answer is: technically yes. That creates real risk for venture capital deployment.

This is why the CLARITY Act is critical. Until commodity status is statutory, there’s always reversal risk. Smart investors are:

  • Building reversal scenarios into term sheets
  • Requiring protocols to maintain compliance documentation
  • Diversifying across multiple regulatory jurisdictions
  • Hedging with offshore entities alongside U.S. operations

The International Angle

One more point: U.S. clarity matters, but we’re building global protocols. Many Web3 startups are now structuring with:

  • U.S. entity: for institutional/regulated customers
  • Offshore entity: for retail/global users
  • DAO structure: for protocol governance

This adds complexity and compliance costs, but it’s becoming standard practice.

Bottom Line

This SEC guidance is the most positive regulatory development in crypto’s history. It’s unlocking institutional capital and giving builders confidence.

But it’s also creating new challenges:

  • Two-tier market (approved commodities vs everyone else)
  • Lobbying incentives that waste resources
  • Continued uncertainty about governance tokens and LSTs
  • Reversal risk until CLARITY Act passes

I’m optimistic about where we’re headed, but let’s be clear-eyed about the limitations. Statutory protection is what we ultimately need, and the industry needs to push Congress hard to pass the CLARITY Act.

What are other founders seeing on the fundraising and investor relations side?

5

I appreciate the legal and business perspectives from Rachel, Diana, and Steve. Let me offer a technical and philosophical critique from someone who’s been building on blockchain since 2013.

The Core Tension: Permissionless Innovation vs Regulatory Gatekeeping

Steve hit on something crucial: “Are we creating a world where success requires regulatory blessing, not just technical merit?”

This is the fundamental question. Bitcoin was created to be permissionless - you didn’t need anyone’s approval to run a node, mine blocks, or transact. The whole point was that code, not regulators, determined what was valid.

Now we have the SEC creating an “approved commodities list.” That’s the opposite of permissionless innovation.

Does Bitcoin Need SEC Approval to Be Valuable?

Let me be blunt: Bitcoin doesn’t need the SEC to tell us it’s a commodity.

Bitcoin’s value proposition is:

  • Decentralized monetary network
  • 21M hard cap enforced by consensus rules
  • Permissionless participation (anyone can run a node)
  • Censorship resistance

None of those properties depend on regulatory approval. Bitcoin worked before March 17, 2026, and it’ll work regardless of what the SEC says.

The Real Question: Who Are We Building For?

This guidance reveals a philosophical split in crypto:

Camp 1: Building for institutions

  • Need regulatory clarity to attract institutional capital
  • Willing to accept “approved lists” and compliance frameworks
  • Prioritize fiat integration and traditional finance compatibility

Camp 2: Building for permissionless systems

  • Don’t care about SEC approval - building protocols that work regardless
  • Prioritize censorship resistance and decentralization over institutional adoption
  • Value technical soundness over regulatory validation

I’m firmly in Camp 2. If your protocol requires SEC blessing to succeed, it’s not truly decentralized.

Technical Analysis: Does the Classification Methodology Make Sense?

Rachel explained the legal framework, but let’s examine whether it makes technical sense.

The SEC says digital commodities “derive value from network operation rather than managerial efforts.”

That’s a reasonable framework for:

  • Bitcoin (pure PoW, no foundation, fully decentralized)
  • Potentially some other PoW chains

But does it apply to:

  • Ethereum? The Ethereum Foundation influences roadmap decisions, funds core developers, coordinates upgrades
  • Solana? Solana Labs and the Solana Foundation play major roles in network development
  • Cardano? IOHK drives protocol research and development

I’m not saying these are securities - I’m saying the “no managerial efforts” test doesn’t cleanly apply to many named commodities. The SEC is making pragmatic compromises to fit major assets into commodity status, not applying consistent technical criteria.

Decentralization as Regulation Resistance

Diana made a critical point: “DeFi builders should design for worst-case regulatory scenarios.”

From a technical standpoint, here’s what regulation-resistant architecture looks like:

  1. Immutable contracts - no admin keys, no upgradeability proxies
  2. No foundation control - protocol can’t be shut down by arresting founders
  3. Algorithmic parameter adjustment - no governance votes on core functionality
  4. Censorship-resistant infrastructure - runs even if governments ban it

If you design protocols this way, you don’t need to worry about whether the SEC classifies you as a commodity or security. The protocol just works, regardless of regulatory environment.

The Liquid Staking Technical Question

Emma and Rachel discussed whether liquid staking tokens (stETH, jitoSOL, rETH) might be securities.

From a protocol design perspective, here’s what matters:

Centralized liquid staking:

  • Single entity controls validator set
  • Governance votes on staking strategy
  • Users rely on entity’s operational competence
  • Probably looks like a security under Howey

Decentralized liquid staking:

  • Permissionless node operator set (Rocket Pool model)
  • Algorithmic reward distribution
  • No entity controlling the protocol
  • Stronger argument for commodity/utility classification

The technical architecture directly affects legal classification. Builders should prioritize decentralization not just for ideological reasons, but for regulatory risk mitigation.

Why I’m Skeptical of the “Approved List” Approach

Steve talked about lobbying to get added to future commodity lists. This creates terrible incentives:

  • Capital flows to political connections rather than technical merit
  • Regulatory capture - incumbents lobby to keep competitors off the list
  • Centralization pressure - projects may centralize to have clear entities that can lobby effectively
  • Resource misallocation - money spent on DC lawyers instead of protocol development

This is not how permissionless innovation works. The whole point of crypto was that you could launch a better protocol tomorrow and compete on technical merit alone.

My Hot Take: Build for Fundamentals, Not Regulatory Arbitrage

Rachel says “compliance enables innovation.” I say: true decentralization makes compliance irrelevant.

If your protocol is truly decentralized:

  • No admin keys to seize
  • No foundation to sue
  • No centralized entity to regulate
  • Code runs regardless of regulatory environment

That’s the vision Satoshi had. Bitcoin doesn’t ask permission. Neither should the next generation of blockchain infrastructure.

Where I Agree with Rachel and Diana

That said, I’m not totally naive. Rachel and Diana are right that:

  • Institutional capital needs clarity - banks and asset managers won’t touch ambiguous legal status
  • Practical reality matters - pure ideology doesn’t build sustainable businesses
  • Compliance frameworks enable growth - look at Coinbase’s success as a regulated exchange

I just think we should be clear about the tradeoffs:

  • Take institutional money? Accept regulatory oversight
  • Want true decentralization? Give up easy access to Wall Street capital
  • Building infrastructure? Prioritize permissionless design over regulatory approval

Bottom Line

This SEC guidance is practically useful for institutional adoption. But philosophically, it represents a retreat from crypto’s core innovation: permissionless systems that don’t require anyone’s approval.

If you’re building for institutions and need SEC clarity - great, this guidance helps.

If you’re building truly decentralized infrastructure - ignore the SEC and focus on making protocols that work regardless of regulatory environment.

Bitcoin didn’t ask permission. Neither should the next generation of builders.